Lines Matching refs:certificate
84 This command is a multi-purposes certificate handling command.
85 It can be used to print certificate information,
86 convert certificates to various forms, edit certificate trust settings,
105 This specifies the input to read a certificate from
106 or the input file for reading a certificate request if the B<-req> flag is used.
113 The key and certificate file password source.
119 Generate a certificate from scratch, not using an input certificate
120 or certificate request. So the B<-in> option must not be used in this case.
128 Output a PKCS#10 certificate request (rather than a certificate).
132 X.509 extensions included in a certificate input are not copied by default.
137 By default a certificate is expected on input.
138 With this option a PKCS#10 certificate request is expected instead,
147 when converting from a certificate to a request using the B<-x509toreq> option
148 or converting from a request to a certificate using the B<-req> option.
152 are not taken over when producing a certificate request.
168 This option provides the private key for signing a new certificate or
169 certificate request.
171 the new certificate or certificate request, resulting in a self-signature.
202 Do not output a certificate (except for printing as requested by below options).
224 Prints out the certificate in text form. Full details are printed including the
238 certificate (see digest options).
240 digests, the fingerprint of a certificate is unique to that certificate and
245 Prints the certificate "alias" (nickname), if any.
249 Prints the certificate serial number.
253 Prints out the start date of the certificate, that is the notBefore date.
257 Prints out the expiry date of the certificate, that is the notAfter date.
261 Prints out the start and expiry dates of a certificate.
283 Prints the "hash" of the certificate subject name. This is used in OpenSSL to
289 Prints the "hash" of the certificate subject name using the older algorithm
294 Prints the "hash" of the certificate issuer name.
298 Prints the "hash" of the certificate issuer name using the older algorithm
303 Prints out the certificate extensions in text form.
319 This option performs tests on the certificate extensions and outputs
325 Prints the certificate's SubjectPublicKeyInfo block in PEM format.
330 contained in the certificate.
340 Checks if the certificate expires within the next I<arg> seconds and exits
345 Check that the certificate matches the specified host.
349 Check that the certificate matches the specified email address.
353 Check that the certificate matches the specified IP address.
372 Set the serial to be one more than the number in the certificate.
376 Specifies the number of days until a newly generated certificate expires.
382 When signing a certificate, preserve "notBefore" and "notAfter" dates of any
383 input certificate instead of adjusting them to current time and duration.
388 When a certificate is created set its subject name to the given value.
389 When the certificate is self-signed the issuer name is set to the same value.
394 in the certificate.
403 to create a certificate even without providing an input certificate
404 or certificate request.
408 When a certificate is created set its public key to the key in I<filename>
415 generate a certificate containing any desired public key.
419 When transforming a certificate to a new certificate
420 by default all certificate extensions are retained.
422 When transforming a certificate or certificate request,
424 In any case, when producing a certificate request,
429 Configuration file containing certificate and request X.509 extensions to add.
469 Specifies the "CA" certificate to be used for signing.
471 The subject name of the "CA" certificate is placed as issuer name in the new
472 certificate, which is then signed using the "CA" key given as detailed below.
476 Without the B<-req> option the input must be an existing certificate
477 unless the B<-new> option is given, which generates a certificate from scratch.
481 The format for the CA certificate; unspecifed by default.
486 Sets the CA private key to sign a certificate with.
487 The private key must match the public key of the certificate given with B<-CA>.
499 When the B<-CA> option is used to sign a certificate it uses a serial
504 The default filename consists of the CA certificate file base name with
505 F<.srl> appended. For example if the CA certificate file is called
512 it will contain the serial number "02" and the certificate being signed will
521 A B<trusted certificate> is an ordinary certificate which has several
523 and prohibited uses of the certificate and possibly an "alias" (nickname).
525 Normally when a certificate is being verified at least one certificate
526 must be "trusted". By default a trusted certificate must be stored
527 locally and must be a root CA: any certificate chain ending in this CA
538 certificate: not just root CAs.
544 Mark any certificate PEM output as <trusted> certificate rather than ordinary.
545 An ordinary or trusted certificate can be input but by default an ordinary
546 certificate is output and any trust settings are discarded.
547 With the B<-trustout> option a trusted certificate is output. A trusted
548 certificate is automatically output if any trust settings are modified.
552 Sets the "alias" of the certificate. This will allow the certificate
557 Clears all the permitted or trusted uses of the certificate.
561 Adds a trusted certificate use.
570 Clears all the prohibited or rejected uses of the certificate.
638 Don't give a hexadecimal dump of the certificate signature.
642 Don't print out certificate trust information.
651 certificate extensions.
655 Print an error message for unsupported certificate extensions.
677 Print the contents of a certificate:
681 Print the "Subject Alternative Name" extension of a certificate:
685 Print more extensions of a certificate:
689 Print the certificate serial number:
693 Print the certificate subject name:
697 Print the certificate subject name in RFC2253 form:
701 Print the certificate subject name in oneline form on a terminal
706 Print the certificate SHA1 fingerprint:
710 Convert a certificate from PEM to DER format:
714 Convert a certificate to a certificate request:
718 Convert a certificate request into a self-signed certificate using
724 Sign a certificate request using the CA certificate above and add user
725 certificate extensions:
730 Set a certificate to be trusted for SSL client use and change set its alias to